popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9331 2023-10-25 11:20 smss.exe  

841031a37159398b8eebca7bb7eff56b


Formbook AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		1 3 1 9.6 M 52 ZeroCERT

9332 2023-10-25 11:18 sbin22zx.exe  

78d449904f1a8a3000a3ba549dba764e


Formbook .NET framework(MSIL) AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself crashed 		3 6 1 9.8 M 46 ZeroCERT

9333 2023-10-25 11:16 audiodgse.exe  

3059a8f7e4b873219bc3dc4d510e936a


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 53 ZeroCERT

9334 2023-10-25 11:16 kung.exe  

f6e91ab67abb675d4893f49397629d95


Malicious Packer PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory AntiVM_Disk suspicious TLD VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 2 6 8.0 M 66 ZeroCERT

9335 2023-10-25 11:00 HTMLprofile.doc  

5342b58b3951c40f8e5eb08f5d9824be


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Tofsee Windows Exploit Google DNS crashed 		7 30 9 4.4 28 ZeroCERT

9336 2023-10-25 10:55 HTMLCacheCentos.doc  

b1e8cf61c7cef7569de508e08785dadf


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Exploit crashed 		2.6 28 ZeroCERT

9337 2023-10-25 10:53 ImxyQs.exe  

6b99673a78e02bdd536e208b986c5b4d


.NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		1 2.2 M 48 ZeroCERT

9338 2023-10-25 10:48 HTMLCacheCentos.dOC  

b39f481790c393d21234af0ced69da7a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash Tofsee Exploit crashed 		2 3 2.2 M 29 ZeroCERT

9339 2023-10-25 10:37 HTMLCachesClear.dOC  

ae797eafb49080484af9350259e7920a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash Tofsee Exploit crashed 		2 3 2.2 M 29 ZeroCERT

9340 2023-10-25 09:54 setup.exe  

fe90648e5db0ee19d7dcae2a5f4acc25


Malicious Library PE File PE32 VirusTotal Malware WMI Creates executable files RWX flags setting Checks Bios anti-virtualization ComputerName 		4.2 M 41 ZeroCERT

9341 2023-10-25 09:54 HTMLCacheCentos.dOC  

b39f481790c393d21234af0ced69da7a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself Tofsee Exploit crashed 		2 3 2.6 M 29 ZeroCERT

9342 2023-10-25 09:52 201.exe  

6c13146feeabc071309b41335514bf99


Themida Packer Malicious Library UPX Http API ScreenShot Internet API AntiDebug AntiVM PE File PE32 .NET EXE DLL OS Processor Check Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare AppData folder sandbox evasion VMware anti-virtualization installed browsers check Ransomware Lumma Stealer Windows Browser ComputerName Firmware Cryptographic key crashed 		1 2 2 16.0 M 23 ZeroCERT

9343 2023-10-25 09:52 HTMLprofile.dOC  

2885bbb18db2fc076e129a10729faadb


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself Tofsee Exploit crashed 		2 2 3 3.2 M 30 ZeroCERT

9344 2023-10-25 09:50 HTMLCachesClear.dOC  

ae797eafb49080484af9350259e7920a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Tofsee Exploit crashed 		2 3 2.6 M 29 ZeroCERT

9345 2023-10-25 09:49 timeSync.exe  

b493dabf9da2cf24146955b3c9aeb7be


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Remote Code Execution 		2.0 M 31 ZeroCERT

keyword